Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-101031— Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier

Quick assessment

Affected

Apache Software Foundation Apache Airflow

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

随 Apache Airflow 一同提供的示例 DAG 通过 HTTP 获取 IP 地址，并使用 Python 的模块对其进行验证，随后将该地址嵌入到 shell 命令中执行。由于模块接受包含任意字符的 IPv6 区域标识符（zone identifier），因此在启用示例 DAG 加载（为）的情况下，若用户能够通过自定义参数触发该 DAG，则可能将其指向一个恶意服务器；该服务器返回的响应可注入 shell 命令，进而在 Airflow Worker 节点上执行。此修复针对 CVE-2025-5494

AI Predicted 9.8 Difficulty: Easy Updated Nov 09, 2026

Possible ATT&CK Techniques 2 AI

T1190 · Exploit Public-Facing Application T1059 · Command and Scripting Interpreter

Updated Nov 09, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier

Source: CVE Program / CVE List V5

Vulnerability Description

The `example_dag_decorator` example Dag shipped with Apache Airflow validated an IP address fetched over HTTP with Python's `ipaddress` module and then placed it into a shell command. `ipaddress` accepts IPv6 zone identifiers containing arbitrary characters, so when example Dags are loaded (`load_examples` enabled), a user who can trigger that Dag with a custom `url` parameter could point it at a server whose response injects shell commands run on the worker. This is an incomplete fix for CVE-2025-54941; users who upgraded for CVE-2025-54941 should upgrade again. Users are advised to upgrade to apache-airflow 3.4.0 or later, or to disable example Dags (`load_examples = False`), which is recommended for production.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Apache Software Foundation	Apache Airflow	3.0.5 ~ 3.4.0	-

II. Public POCs for CVE-2026-101031

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-101031

请登录查看更多情报信息。

Other References for CVE-2026-101031 (3)

https://www.cve.org/CVERecord?id=CVE-2025-54941 related
https://lists.apache.org/thread.html/p53zxybld58wv722c7zxk0w8d2rnkfwk vendor-advisory
https://github.com/apache/airflow/pull/73787 patch

https://www.cve.org/CVERecord?id=CVE-2026-101031

Same Patch Batch · Apache Software Foundation · 2026-11-09 · 28 CVEs total

CVE-2026-76185		Apache Airflow Task SDK: Task SDK SecretCache: non-injective team cache key enables cross-
CVE-2026-111455		Apache Airflow: Connections API: async connection test authorizes create at enqueue but ov
CVE-2026-111454		Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the call
CVE-2026-111453		Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value bu
CVE-2026-111452		Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhook
CVE-2026-111421		Apache Airflow: Execution API: set_xcom skips the reserved-key check, so task-written XCom
CVE-2026-111395		Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are reb
CVE-2026-107474		Apache Airflow: Connections API: apprise connection "config" extra returned in cleartext
CVE-2026-113504		Apache Airflow: Secrets masker: pattern-based masking bounded at depth 5 returns deeply-ne
CVE-2026-113508		Apache Airflow: Logout token revocation fails open; errors silently swallowed
CVE-2026-96285		Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data
CVE-2026-86468		Apache Airflow: CLI argv masking misses Variable values and --conn-extra, persisting secre
CVE-2026-82337		Apache Airflow: DeadlineAlert fields bypass plugin-registration gate for scheduler-side de
CVE-2026-86829		Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dep
CVE-2026-120367		Apache Axis2/Java: unbounded JSON request body buffering
CVE-2026-68982		Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without wo
CVE-2026-50204		Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection a
CVE-2026-40913		Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-F
CVE-2026-82440		Apache Storm Nimbus: Submitter-Controlled Class Instantiation in Nimbus via a Fail-Open Sc
CVE-2026-82436		Apache Storm Client: Deserialization of Untrusted Data from the State Store

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Apache Airflow

Same vendor: Apache Software Foundation

Same weakness: CWE-78